Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer (raw, json)
Hash identifier: jE4zEk8w5LWf3PWInhb35PjyGE/L5s3PBaa3Ipr2oa0=
Subject key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E022A9CF145FA82CE3B2FE9260F40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2.57.72.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:02:2a:9c:f1:45:fa:82:ce:3b:2f:e9:26:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:8e:56:a4:1b:62:6b:5f:ca:8a:28:90:66:
d3:52:bf:b8:81:b0:82:a8:b7:d6:9e:15:4b:b8:d7:
bf:44:37:dd:46:63:bf:3c:d0:3c:16:69:5f:7e:a9:
57:b5:4f:17:02:27:e5:8b:63:b4:13:de:d5:e9:86:
92:30:fc:76:04:12:43:b5:cb:f8:98:14:55:ec:a9:
3d:f2:d7:e3:f4:c0:39:f9:b4:9f:e6:2a:4d:ff:3a:
a9:27:88:86:12:bd:d2:72:3b:e7:e3:a2:13:c0:47:
36:58:b3:93:7b:87:ac:41:f2:ce:76:fc:26:a9:aa:
cc:c3:d7:2b:b6:92:dc:9e:e8:ff:ab:66:ad:a2:90:
5c:c0:1f:f8:78:9b:87:0f:00:0b:f2:d5:f4:05:9b:
c7:0c:2e:6b:3d:d3:ba:22:fb:6d:c6:fa:a7:bb:92:
aa:42:d8:06:07:73:0c:df:0c:59:9b:a0:bf:45:02:
42:da:a8:b6:81:56:42:8a:2a:3c:ba:62:0c:bf:eb:
ee:99:08:31:27:81:de:51:62:8c:93:6d:e8:d7:a5:
01:1e:38:66:7d:5b:1c:3d:ac:46:22:0d:0a:e3:e5:
cd:8f:ba:0b:47:ef:b1:3c:da:26:de:01:ad:4c:b6:
d2:57:2e:cd:a7:7c:47:24:dc:4a:4b:99:1b:51:97:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ff:b8:d2:ed:81:67:60:53:17:06:44:f3:d3:20:ab:b8:27:
ab:77:bb:1b:4f:09:03:f9:f1:b9:2c:3c:77:e3:70:98:e0:1e:
d2:7e:5f:68:da:1f:31:fd:00:18:b9:97:f6:e9:9b:34:2c:61:
8e:e7:71:6d:ba:76:7f:e9:72:bd:c5:7e:4c:a8:95:2c:c4:6a:
cf:3c:85:9a:0b:67:57:d6:44:4c:65:63:93:74:68:ec:c3:09:
48:b9:3b:6d:75:2a:67:d5:7b:e6:f4:e0:11:85:53:73:ae:b3:
22:87:bb:4f:bb:1e:d6:bd:c7:98:cd:69:70:d0:c6:e3:aa:ff:
0c:9f:08:5e:ed:c6:92:03:43:27:3b:b1:34:93:0e:15:7f:ea:
cc:a3:10:b2:bf:60:f4:ad:05:5c:e7:52:90:61:58:f6:78:c8:
94:04:5c:bd:1c:7d:db:8b:8b:50:84:9d:fb:1c:56:ae:e2:78:
73:09:db:51:02:b4:a5:da:4e:a6:38:df:87:80:ed:b5:04:d8:
f0:a0:23:94:c2:da:82:71:a2:61:12:54:af:b3:f4:22:29:72:
a8:11:59:88:f7:c8:3c:c7:8b:74:59:7e:6d:7d:a9:0c:c2:76:
80:62:32:15:1a:f3:54:e3:46:2b:b9:d3:4c:5b:06:ee:47:8e:
84:cd:db:20
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQijgIqnPFF+oLOOy/pJg9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWM2MTBkMjE1ZDM4OTEzNDJiYzMyODcyYTUwZjRkMGNmYTlkYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNGOVqQbYmtfyoookGbTUr+4gbCC
qLfWnhVLuNe/RDfdRmO/PNA8FmlffqlXtU8XAifli2O0E97V6YaSMPx2BBJDtcv4
mBRV7Kk98tfj9MA5+bSf5ipN/zqpJ4iGEr3Scjvn46ITwEc2WLOTe4esQfLOdvwm
qarMw9crtpLcnuj/q2atopBcwB/4eJuHDwAL8tX0BZvHDC5rPdO6Ivttxvqnu5Kq
QtgGB3MM3wxZm6C/RQJC2qi2gVZCiio8umIMv+vumQgxJ4HeUWKMk23o16UBHjhm
fVscPaxGIg0K4+XNj7oLR++xPNom3gGtTLbSVy7Np3xHJNxKS5kbUZcLZQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFH7GENIV04kTQrwyhypQ9NDPqdyfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzIyOTEx
Yy1jZTUxLTQzOGItODZjZi1lODU2NjEzZDJiMTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMjI5MTFj
LWNlNTEtNDM4Yi04NmNmLWU4NTY2MTNkMmIxMC8xL2ZzWVEwaFhUaVJOQ3ZES0hL
bEQwME0tcDNKOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCAjlIMA0GCSqGSIb3DQEBCwUAA4IBAQCN/7jS
7YFnYFMXBkTz0yCruCerd7sbTwkD+fG5LDx343CY4B7Sfl9o2h8x/QAYuZf26Zs0
LGGO53FtunZ/6XK9xX5MqJUsxGrPPIWaC2dX1kRMZWOTdGjswwlIuTttdSpn1Xvm
9OARhVNzrrMih7tPux7WvceYzWlw0Mbjqv8Mnwhe7caSA0MnO7E0kw4Vf+rMoxCy
v2D0rQVc51KQYVj2eMiUBFy9HH3bi4tQhJ37HFau4nhzCdtRArSl2k6mON+HgO21
BNjwoCOUwtqCcaJhElSvs/QiKXKoEVmI98g8x4t0WX5tfakMwnaAYjIVGvNU40Yr
udNMWwbuR46Ezdsg
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:11 2025 by rpki-client